Static task
static1
Behavioral task
behavioral1
Sample
3c532934c5699b831d01dc720e679ae9_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
3c532934c5699b831d01dc720e679ae9_JaffaCakes118
-
Size
123KB
-
MD5
3c532934c5699b831d01dc720e679ae9
-
SHA1
22a812012ba68821dc3fcc658883f43d6c0b0dc8
-
SHA256
fb97712a382c0511d21e1bdb70b1935ba278767f36f1c813ac4dc8b15e2fe3a7
-
SHA512
45d54c361091811f3e3cb8be3ad8b791564570c1835d2c70e37e2e840878db91113d8169e745304962ef851a723573ce52a1667098eeb29c7eaf1279a671cc18
-
SSDEEP
3072:35olHoD2W8HqN6vJqDgj2GbGERHwZVMyzU:p4HoDFwqp0RKVMyz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c532934c5699b831d01dc720e679ae9_JaffaCakes118
Files
-
3c532934c5699b831d01dc720e679ae9_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nhexeri Size: 68KB - Virtual size: 68KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE